Senior Manager, Product Security Engineering (Security Posture & Supply Chain)

Overview

Lead the Security Posture Management (SPM) team in Product Security Engineering, securing GitLab’s “software factory” (the estate the company builds and ships from) and driving governed rollouts of security capabilities.

What you’ll do

• Lead comprehensive, governed rollouts of GitLab’s own security capabilities across the estate.
• Set a security baseline to provide secure defaults and align projects with the Project Security Configuration Standard.
• Act as “Customer Zero” by capturing where adoption at scale is hard and feeding evidence to Product and Engineering.
• Establish proactive software supply chain security, including third-party component governance and trusted dependency controls.
• Reduce systemic risk across groups and namespaces, including lateral movement and token governance.
• Own operations of the Product Security Risk Register and associated metrics/dashboards.

What you’ll need

• Experience managing a security or engineering team (hiring, performance, career development).
• Technical fluency across security posture management, software supply chain security, and secure configuration of a large SaaS estate.
• Track record driving governed rollouts across an engineering organization you don’t own and sustaining adoption after launch.
• Ability to translate security requirements into engineering controls that avoid slowing teams down.
• Familiarity producing control evidence for audits/certification/maturity assessments and partnering with Compliance/GRC.
• Strong written communication and ability to drive measurable impact in a high-ambiguity environment.

Details

• Job locations listed as remote: Canada, Israel, United Kingdom, United States.